3 results · Feed
-
Unscored —
`libcrux-aesgcm` Renamed to `libcrux-aes`
Crate `libcrux-aesgcm` was renamed to `libcrux-aes` and will no longer receive new versions under the name `libcrux-aesgcm`, with the final released version under that name being version `0.0.8`. The original functionality is now provided in crate `libcrux-ae…
-
Unscored —
Non-constant time Authentication Tag Check in AES-GCM Decryption
AES-GCM decryption used an implementation for checking the provided authentication tag against the recomputed authentication tag that was intended to be constant-time, but resulted in non-constant-time code generation in certain circumstances. Note that `libc…
-
Unscored —
AES-GCM did not enforce limits on AAD length
NIST Special Publication 800-38D specifies that the bit length of the AAD shall not exceed `2^64 - 1` bits. The implementation of AES-GCM in `libcrux-aesgcm` neither enforced this limit for encryption nor for decryption. ## Impact Use of AES-GCM with AAD of l…